Static task
static1
Behavioral task
behavioral1
Sample
9898a9d4d09e0c436bf2dda5b0dfa6d3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9898a9d4d09e0c436bf2dda5b0dfa6d3.exe
Resource
win10v2004-20231215-en
General
-
Target
9898a9d4d09e0c436bf2dda5b0dfa6d3
-
Size
12KB
-
MD5
9898a9d4d09e0c436bf2dda5b0dfa6d3
-
SHA1
90a100bb7d737ed490735aec0999896b4aea2fe9
-
SHA256
e804c32b04d9a0681e6a86b9c9a41fe3ed5be2aa2d8e175bb5220c4dca3e2967
-
SHA512
0af06832cf8c1610b3ee8f09096063e608ab184debb1cbe8b5214d1a5d05c3abeaa9c9ded19d15537fb5e57005029d0eeed8a4e66e4818c5497c8a2e91fb7a1d
-
SSDEEP
48:yg+SKm+sbwdLWP6lIliLcUr2Ykq8jffcenqM7UMHbKHZlbv+/rM3c09V7wntbK2o:eY9bwdLWPUP2YMjMenrTbOrbGAMns201
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9898a9d4d09e0c436bf2dda5b0dfa6d3
Files
-
9898a9d4d09e0c436bf2dda5b0dfa6d3.exe windows:4 windows x86 arch:x86
b73f2c7aea6d071f18b0342a019785cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord666
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord100
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ